Systems and methods for self correcting secure computer systems

Abstract

A self-correcting secure computer system is provided. The computer system includes a read-only memory (ROM) device, a random access memory (RAM) device, and at least one processor in communication with the ROM device and the RAM device. The at least one processor is programmed to receive an activation signal; retrieve, from the ROM device, data to execute a first configuration including an encryption suite; execute, on the RAM device, the first configuration including the encryption suite; execute the encryption suite to generate a key; store the key at a first memory location; and delete volatile memory associated with the encryption suite.

What is claimed is: 
     
       1. A self-correcting secure computer system comprising:
 a read-only memory (ROM) device; 
 a random access memory (RAM) device; and 
 at least one processor in communication with the ROM device and the RAM device, the at least one processor programmed to: 
 receive an activation signal; 
 retrieve, from the ROM device, data to execute a first configuration including an encryption suite; 
 execute, on the RAM device, the first configuration including the encryption suite; 
 execute the encryption suite to generate a key; 
 store the key at a first memory location, wherein the first memory location is in a persistent memory, and wherein the first configuration prevents access to the persistent memory other than at the first memory location; and 
 delete volatile memory associated with the encryption suite. 
 
     
     
       2. The computer system in accordance with  claim 1 , wherein the at least one processor is further programmed to delete the volatile memory associated with encryption suite by rebooting the computer system. 
     
     
       3. The computer system in accordance with  claim 1 , wherein a portion of the RAM device is configured for executing the encryption suite and wherein the at least one processor is further programmed to delete one or more links to the portion of the RAM device associated with the encryption suite. 
     
     
       4. The computer system in accordance with  claim 1 , wherein the at least one processor is further programmed to:
 execute, on the RAM device, a second configuration without an encryption suite; and 
 retrieve, from the first memory location, the key while executing the second configuration. 
 
     
     
       5. The computer system in accordance with  claim 1 , wherein the at least one processor is further programmed to:
 execute a network connection; 
 receive a request to access the key for at least one operation; 
 deactivate the network connection; 
 retrieve the key from the first memory location to volatile memory; 
 perform the at least one operation with the key; 
 delete the key from the volatile memory; and 
 reactivate the network connection after deleting the key. 
 
     
     
       6. The computer system in accordance with  claim 5 , wherein the at least one processor is further programmed to:
 receive a signal from a hardware button; and 
 deactivate the network connection in response to the signal from the hardware button. 
 
     
     
       7. The computer system in accordance with  claim 5 , further comprising a network device and a hardware switch, wherein the hardware switch is configured to directly deactivate the network device when activated. 
     
     
       8. The computer system in accordance with  claim 1 , wherein the at least one processor is further programmed to encrypt the key prior to storing in the first memory location using a first encryption method. 
     
     
       9. The computer system in accordance with  claim 8 , wherein the at least one processor is further programmed to:
 retrieve the key from the first memory location to volatile memory; 
 decrypt the key; 
 perform at least one operation with the decrypted key; and 
 delete the decrypted key from the volatile memory. 
 
     
     
       10. The computer system in accordance with  claim 1 , wherein the at least one processor is further programmed to:
 retrieve, from the ROM device, data to execute an initial configuration; 
 execute, on the RAM device, the initial configuration; 
 receive an activation signal for an encryption suite; and 
 retrieve, from the ROM device, data to execute the first configuration including the encryption suite in response to the activation signal. 
 
     
     
       11. The computer system in accordance with  claim 10 , wherein the first configuration is stored in an encrypted portion of the ROM device, and wherein the at least one processor is further programmed to:
 retrieve, from the ROM device, the encrypted first configuration; 
 decrypt the first configuration; and 
 execute the decrypted first configuration. 
 
     
     
       12. The computer system in accordance with  claim 1 , wherein the at least one processor is further programmed to:
 receive the activation signal from a remote computer device through a secure connection; and 
 provide access to the key through the secure connection. 
 
     
     
       13. A method of operating a self-correcting secure computer system comprising a read-only memory (ROM) device, a random access memory (RAM) device, and at least one processor in communication with the ROM device and the RAM device, the method comprising:
 receiving an activation signal; 
 retrieving, from the ROM device, data to execute a first configuration including an encryption suite; 
 executing, on the RAM device, the first configuration including the encryption suite; 
 executing the encryption suite to generate a key; 
 storing the key at a first memory location, wherein the first memory location is in a persistent memory; 
 preventing access to the persistent memory other than at the first memory location; and 
 deleting volatile memory associated with the encryption suite. 
 
     
     
       14. The method in accordance with  claim 13  further comprising:
 executing, on the RAM device, a second configuration without an encryption suite; and 
 retrieving, from the first memory location, the key while executing the second configuration. 
 
     
     
       15. The method in accordance with  claim 13  further comprising:
 executing a network connection; 
 receiving a request to access the key for at least one operation; 
 deactivating the network connection; 
 retrieving the key from the first memory location to volatile memory; 
 performing the at least one operation with the key; 
 deleting the key from the volatile memory; and 
 reactivating the network connection after deleting the key. 
 
     
     
       16. The method in accordance with  claim 13  further comprising:
 encrypting the key prior to storing in the first memory location using a first encryption method; 
 retrieving the key from the first memory location to volatile memory; 
 decrypting the key; 
 performing at least one operation with the decrypted key; and 
 deleting the decrypted key from the volatile memory. 
 
     
     
       17. The method in accordance with  claim 13  further comprising:
 retrieving, from the ROM device, data to execute an initial configuration; 
 executing, on the RAM device, the initial configuration; 
 receiving an activation signal for an encryption suite; and 
 retrieving, from the ROM device, data to execute the first configuration including the encryption suite in response to the activation signal. 
 
     
     
       18. The method in accordance with  claim 13 , wherein a portion of the RAM device is configured for executing the encryption suite, and wherein the method further comprises deleting one or more links to the portion of the RAM device associated with the encryption suite. 
     
     
       19. The method in accordance with  claim 16  further comprising:
 retrieving the key from the first memory location to volatile memory; 
 decrypting the key; 
 performing at least one operation with the decrypted key; and 
 deleting the decrypted key from the volatile memory. 
 
     
     
       20. The method in accordance with  claim 17  further comprising:
 storing the first configuration in an encrypted portion of the ROM device; 
 retrieving, from the ROM device, the encrypted first configuration; 
 decrypting the first configuration; and 
 executing the decrypted first configuration. 
 
     
     
       21. The method of  claim 13  further comprising:
 receiving the activation signal from a remote computer device through a secure connection; and 
 providing access to the key through the secure connection.